Re: Millions of './ANY/IN' queries denied

2021-12-15 Thread John Kristoff
On Wed, 15 Dec 2021 12:51:19 +0100 Danilo Godec via bind-users wrote: [...] > 15-Dec-2021 00:01:42.127 security: info: client @0x7f96180b3fe0 > 45.145.227.33#11092 (.): view outside: query (cache) './ANY/IN' denied This can be common noise you'll see if any external source can get queries to you

Using RRL to for TC=1 on all queries

2021-06-19 Thread John Kristoff
Has anyone configured BIND to force TC=1 responses on all queries using RRL?I'd like to do this for some experimentation and measurement work, but maybe this just isn't the right tool for that job? I've tried a number of configurations (e.g. slip=1, rate=0) and I can't seem to make this work.

Re: Getting "query failed (REFUSED) for ./IN/ANY"

2021-01-13 Thread John Kristoff
On Wed, 13 Jan 2021 10:21:19 +0100 Alessandro Vesely wrote: > Yesterday I got 42639 of those, from 41 different IPs, the most frequent > clients looking like so: > 821-north:~$ sed -rn 's/^.{15} 30 north named[^:]*: client @0x[0-91-f]* > ([0-9.]*)#[0-9]* ...: view external: query failed .REFUSE